CVE-2025-62185

Published October 7th, 2025

View on NVD ↗

CVSS v3

6.7

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlp_x86.exe.

ankitects/anki

Anki is a smart spaced repetition flashcard program

GitHub

28.3K